compensation nigerian-style spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 21 Dec 2022 07:12:20 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1p7znc-00010e-1u
for dave@doctor.nl2k.ab.ca;
Wed, 21 Dec 2022 07:10:24 -0700
Resent-From: The Doctor
Resent-Date: Wed, 21 Dec 2022 07:10:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f66.google.com ([209.85.166.66]:34491)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1p7tXF-00016i-2p
for doctor@doctor.nl2k.ab.ca;
Wed, 21 Dec 2022 00:29:34 -0700
Received: by mail-io1-f66.google.com with SMTP id p66so5219874iof.1
for; Tue, 20 Dec 2022 23:26:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=1y/FREQ9yKK0ZyfmFLnxMBesO7hahJ4vW7RSZTUWKHA=;
b=L2C1kyXeI/rdSIktUKU2ms8ZgeWPecI78WHCEgvCn+AuN7F1B2cVqw2wJRc4hRAmo7
g1C07RJw6tGizw4jMgogXxpWtYzFBHTxWF7FTmdRrcNTdjhV4rZEbjorysGaSzjUjAe5
EnNKYOX0RaH8lKhvwTTnoEenruhhL522cYwjQYFtqLSvD6vkAYRGtt+r0Xg9NW7zJ92g
VLrkzOudHbeH5MgRARBECEG1hgt7JTPh7vQxedfyJS4+p3mko+sADvLgbh8eYz6+thBE
c6DWDqlE1+NKmelQYrvCGDMqZiZ7mxSKy/t2a4uk+gdhxXLAZZ8BBLyKuPfHqOSxEEy7
haPg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=1y/FREQ9yKK0ZyfmFLnxMBesO7hahJ4vW7RSZTUWKHA=;
b=ybwQWCRKaNZ0b3FZqomDhLdaKkd6M2NtSUC+f9vkYFNvNiAVerA1bP+Ke2m3d2qOzO
4MjoINWmrElQPUvCeq/rlO2TWf70xIjcx20kfbn0DxBI7bMBvsUlFPwePOCH1wUaYajf
TCSwWAD1ghX4Vhg5uy7sBootWp3a8lId7my174c+ErlPPZFgv/k6sg+kARCTBX56mTs4
IU0VhCTreuRjS8wIpc9IQ4RCUyx0WoVoAcTvrEfOZNOjc/toDCkHCUTzP7L8NJmowNVT
mgNEm2K+tckdmHFy+srdTuAzWEutMo5/3tI+uHu8dJ9n6do+DpyPf4V9dL+3+bcCxSXT
nSaA==
X-Gm-Message-State: AFqh2kpXtDXIy0qyCnTI8NhiKwk7o7AIqOO/+/psNTCUkWSRcwQajQ1k
IW7Anj2JwyS5hhUKkZzzjHSjdJszJy2bpe/G2FCl1cGg0uHBCrwhM3o=
X-Google-Smtp-Source: AMrXdXsPAur8zVT7cAxHL4pUwCsSr2BMi1Qqt5JbKC5WyKUooTg7USU3UX0YVCi+ZNVW8CQvNaj9vyBVH0btRywLLqU=
X-Received: by 2002:a63:4c2:0:b0:478:b499:e789 with SMTP id
185-20020a6304c2000000b00478b499e789mr29822pge.157.1671607580586; Tue, 20 Dec
2022 23:26:20 -0800 (PST)
MIME-Version: 1.0
From: Office File
Date: Tue, 20 Dec 2022 23:26:05 -0800
Message-ID:
Subject: $10,000,000. Award & Complement Of The Season
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000b801905f05178aa"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.1
X-Spam_score_int: 191
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am writing to inform you that your compensation/winning
payment of $10,000,000.00.(Ten Million United State Dollars) was approved
today by the Board and Directors of the United Nation Committee on R [...]
Content analysis details: (19.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUBJ_DOLLARS Subject starts with dollar amount
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.166.66 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.66 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[boardfbi54[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[boardfbi54[at]gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} $10,000,000. Award & Complement Of The Season
--0000000000000b801905f05178aa
Content-Type: text/plain; charset="UTF-8"
I am writing to inform you that your compensation/winning payment of
$10,000,000.00.(Ten Million United State
Dollars) was approved today by the Board and Directors of the United Nation
Committee on Rewards and Compensation.
You are therefore advised to reconfirm your details to enable the financial
department to release your payment to you without any delay. Send your
Information to the following E-mail ( noreplyonventis@gmail.com )
Thus, reconfirm the
following:
1. Your Full Name:
3. Your Residential address:
3. Your Occupation::
We look forward to your prompt response.
Best Regards.
Howard Nelson
Director of Payments,
United Nations Ministry of Foreign
Affairs
--0000000000000b801905f05178aa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am writing to inform you that your compensation/=
winning payment of $10,000,000.00.(Ten Million United State
Dollars) was=
approved today by the Board and Directors of the United Nation Committee o=
n Rewards and Compensation.
You are therefore advised to reconfirm your =
details to enable the financial department to release your payment to you w=
ithout any delay. Send your Information to the following E-mail (
=3D"mailto:noreplyonventis@gmail.com">noreplyonventis@gmail.com )
r>Thus, reconfirm the
following:
1. Your Full Name:
3. Your Re=
sidential address:
3. Your Occupation::
We look forward to your p=
rompt response.
Best Regards.
Howard Nelson
Director of Paymen=
ts,
United Nations Ministry of Foreign
Affairs
=C2=A0
>
--0000000000000b801905f05178aa--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 21 Dec 2022 07:12:20 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1p7znc-00010e-1u
for dave@doctor.nl2k.ab.ca;
Wed, 21 Dec 2022 07:10:24 -0700
Resent-From: The Doctor
Resent-Date: Wed, 21 Dec 2022 07:10:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f66.google.com ([209.85.166.66]:34491)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1p7tXF-00016i-2p
for doctor@doctor.nl2k.ab.ca;
Wed, 21 Dec 2022 00:29:34 -0700
Received: by mail-io1-f66.google.com with SMTP id p66so5219874iof.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=1y/FREQ9yKK0ZyfmFLnxMBesO7hahJ4vW7RSZTUWKHA=;
b=L2C1kyXeI/rdSIktUKU2ms8ZgeWPecI78WHCEgvCn+AuN7F1B2cVqw2wJRc4hRAmo7
g1C07RJw6tGizw4jMgogXxpWtYzFBHTxWF7FTmdRrcNTdjhV4rZEbjorysGaSzjUjAe5
EnNKYOX0RaH8lKhvwTTnoEenruhhL522cYwjQYFtqLSvD6vkAYRGtt+r0Xg9NW7zJ92g
VLrkzOudHbeH5MgRARBECEG1hgt7JTPh7vQxedfyJS4+p3mko+sADvLgbh8eYz6+thBE
c6DWDqlE1+NKmelQYrvCGDMqZiZ7mxSKy/t2a4uk+gdhxXLAZZ8BBLyKuPfHqOSxEEy7
haPg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=1y/FREQ9yKK0ZyfmFLnxMBesO7hahJ4vW7RSZTUWKHA=;
b=ybwQWCRKaNZ0b3FZqomDhLdaKkd6M2NtSUC+f9vkYFNvNiAVerA1bP+Ke2m3d2qOzO
4MjoINWmrElQPUvCeq/rlO2TWf70xIjcx20kfbn0DxBI7bMBvsUlFPwePOCH1wUaYajf
TCSwWAD1ghX4Vhg5uy7sBootWp3a8lId7my174c+ErlPPZFgv/k6sg+kARCTBX56mTs4
IU0VhCTreuRjS8wIpc9IQ4RCUyx0WoVoAcTvrEfOZNOjc/toDCkHCUTzP7L8NJmowNVT
mgNEm2K+tckdmHFy+srdTuAzWEutMo5/3tI+uHu8dJ9n6do+DpyPf4V9dL+3+bcCxSXT
nSaA==
X-Gm-Message-State: AFqh2kpXtDXIy0qyCnTI8NhiKwk7o7AIqOO/+/psNTCUkWSRcwQajQ1k
IW7Anj2JwyS5hhUKkZzzjHSjdJszJy2bpe/G2FCl1cGg0uHBCrwhM3o=
X-Google-Smtp-Source: AMrXdXsPAur8zVT7cAxHL4pUwCsSr2BMi1Qqt5JbKC5WyKUooTg7USU3UX0YVCi+ZNVW8CQvNaj9vyBVH0btRywLLqU=
X-Received: by 2002:a63:4c2:0:b0:478:b499:e789 with SMTP id
185-20020a6304c2000000b00478b499e789mr29822pge.157.1671607580586; Tue, 20 Dec
2022 23:26:20 -0800 (PST)
MIME-Version: 1.0
From: Office File
Date: Tue, 20 Dec 2022 23:26:05 -0800
Message-ID:
Subject: $10,000,000. Award & Complement Of The Season
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000b801905f05178aa"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.1
X-Spam_score_int: 191
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am writing to inform you that your compensation/winning
payment of $10,000,000.00.(Ten Million United State Dollars) was approved
today by the Board and Directors of the United Nation Committee on R [...]
Content analysis details: (19.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUBJ_DOLLARS Subject starts with dollar amount
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.166.66 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.66 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[boardfbi54[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[boardfbi54[at]gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} $10,000,000. Award & Complement Of The Season
--0000000000000b801905f05178aa
Content-Type: text/plain; charset="UTF-8"
I am writing to inform you that your compensation/winning payment of
$10,000,000.00.(Ten Million United State
Dollars) was approved today by the Board and Directors of the United Nation
Committee on Rewards and Compensation.
You are therefore advised to reconfirm your details to enable the financial
department to release your payment to you without any delay. Send your
Information to the following E-mail ( noreplyonventis@gmail.com )
Thus, reconfirm the
following:
1. Your Full Name:
3. Your Residential address:
3. Your Occupation::
We look forward to your prompt response.
Best Regards.
Howard Nelson
Director of Payments,
United Nations Ministry of Foreign
Affairs
--0000000000000b801905f05178aa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am writing to inform you that your compensation/=
winning payment of $10,000,000.00.(Ten Million United State
Dollars) was=
approved today by the Board and Directors of the United Nation Committee o=
n Rewards and Compensation.
You are therefore advised to reconfirm your =
details to enable the financial department to release your payment to you w=
ithout any delay. Send your Information to the following E-mail (
=3D"mailto:noreplyonventis@gmail.com">noreplyonventis@gmail.com )
r>Thus, reconfirm the
following:
1. Your Full Name:
3. Your Re=
sidential address:
3. Your Occupation::
We look forward to your p=
rompt response.
Best Regards.
Howard Nelson
Director of Paymen=
ts,
United Nations Ministry of Foreign
Affairs
=C2=A0
>
--0000000000000b801905f05178aa--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments